Eddy Nigg wrote:
Will the update from 3.0.x to 3.5 be done via the automatic update
function or is manual initiation of the update process required?
I think 3.0.x users will be asked to upgrade before support for this
version ends. That's the way it worked with 2.0 -> 3.0 release.
That is my understanding as well.
Will the new CA certificates be included in any other patch (e.g. 3.0.y)
with automatic update
I think that's what's going to happen as far as I could see, but it
might take a while. I'm not sure if it's already checked in into this
branch.
Nelson has proposed adding the new roots and the EV changes to the 3.0.x
branch, and the Firefox developers seem to agree that that would be a
good idea. To my knowledge the changes have not yet been checked in, and
there is not yet a bug in Bugzilla to track this.
Speaking personally I think it is highly probable that a future 3.0.x
release will have the new roots and the EV changes. However because
3.0.x releases can be released quite suddenly in cases where there is a
significant security vulnerability, there is no guarantee that the root
and EV changes will be in the very next 3.0.x release (3.0.11, I believe).
Frank
--
Frank Hecker
hec...@mozillafoundation.org
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
